Apache kafka SSL Security

[Somasuntaram <so...@kloudone.com>]

Hi ,

I have been trying to enable Kafka security ssl authentication using
certificates and encryption. but i am getting errors when i try to create a
topic and Kafka status fails whereas zookeeper is running fine.

Note :- The screenshot of the error I get when I try to create a topic is
attached below

These are commands I tried to create and also i have attached the
server.properties configuration file for your reference.

. Generate the key into a temporary keystore initially
      1 keytool -keystore kafka.server.keystore.jks -alias localhost
-validity 365 -genkey
Generate CA
      2 openssl req -new -x509 -keyout ca-key -out ca-cert -days 365
Add the generated CA to the clients’ truststore
      3 keytool -keystore kafka.client.truststore.jks -alias CARoot -import
-file ca-cert
Export the certificate from the keystore:
      4 keytool -keystore kafka.server.keystore.jks -alias localhost
-certreq -file cert-file
Sign it with the CA:
      5 openssl x509 -req -CA ca-cert -CAkey ca-key -in cert-file -out
cert-signed -days 365 -CAcreateserial -passin pass:windows
Import the certificate of the CA into the keystore
      6 keytool -keystore kafka.server.keystore.jks -alias CARoot -import
-file ca-cert
Import the signed certificate into the keystore
      7 keytool -keystore kafka.server.keystore.jks -alias localhost
-import -file cert-signed

Note:- The SSL certificates are in SSL folder inside the Kafka directory
itself.

Please help in solving this issue.